Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9Bvi0IlfR2X4R-y2HfzzyMwZ0yA.roa
File: 9Bvi0IlfR2X4R-y2HfzzyMwZ0yA.roa (raw, json)
Hash identifier: i+0oI+nhWS2T0zjvU/4D0kdwaQsbB1zf0Kf8WFHin0E=
Subject key identifier: F4:1B:E2:D0:89:5F:47:65:F8:47:EC:B6:1D:FC:F3:C8:CC:19:D3:20
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 202C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9Bvi0IlfR2X4R-y2HfzzyMwZ0yA.roa
Signing time: Fri 25 Nov 2022 04:38:24 +0000
ROA not before: Fri 25 Nov 2022 04:38:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 180.177.46.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8236 (0x202c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:24 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F41BE2D0895F4765F847ECB61DFCF3C8CC19D320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:11:1a:e2:91:be:97:65:58:3e:a6:ce:e1:
49:e5:d0:d4:e8:ca:e7:84:16:e8:d0:09:a4:98:95:
35:d9:28:94:bb:9c:c3:59:3d:d3:9f:ab:b8:7e:66:
95:82:0a:66:61:72:38:18:dd:43:ef:9d:fc:c2:e2:
60:95:aa:4e:50:a1:70:dd:f6:3a:00:fa:f3:67:d9:
1e:34:3c:c4:d7:64:d6:93:dc:d9:84:5d:af:b5:81:
cd:47:65:19:5f:76:2b:93:7a:cc:45:56:e3:39:8d:
c8:b8:b4:10:b4:4c:75:bd:b3:83:de:17:59:43:86:
b3:e2:12:4c:ca:bf:d8:13:c8:27:a3:52:27:fc:77:
e9:dd:a0:ae:57:73:ba:39:f7:cb:31:4a:b9:c4:bf:
df:d7:ef:fb:e7:7a:36:45:d0:0c:3e:43:71:d3:77:
cf:e6:65:e2:26:36:93:84:dd:f4:c4:74:3a:7b:b9:
87:99:0f:33:7a:6f:5e:6c:a0:e2:d6:8b:16:5f:c3:
31:b8:86:57:c8:e9:53:4c:90:12:9f:fb:fc:05:67:
ca:4a:ff:1b:c3:2f:3d:f5:c0:a1:90:ca:42:b7:88:
37:7e:9c:3f:96:dc:88:0c:00:3a:0c:5e:f3:c9:63:
f3:9d:72:89:b1:45:67:29:f6:be:3a:59:a1:d5:e2:
01:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1B:E2:D0:89:5F:47:65:F8:47:EC:B6:1D:FC:F3:C8:CC:19:D3:20
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9Bvi0IlfR2X4R-y2HfzzyMwZ0yA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.46.0/23
Signature Algorithm: sha256WithRSAEncryption
09:30:39:51:d0:bf:20:9b:21:86:63:19:f3:4b:e6:fd:0c:45:
3f:9b:43:f2:7d:54:06:b3:90:7a:35:83:ea:16:a5:70:0d:bb:
60:0f:70:56:fe:b0:63:2d:6d:b5:08:d1:c0:95:96:a8:ab:33:
02:61:10:fc:9a:be:21:08:3a:f4:28:25:47:74:7f:02:96:fb:
72:35:17:fd:1d:63:a3:c5:0d:69:e4:71:9a:fe:6b:0c:8e:ae:
f3:ea:27:e8:9e:ff:8c:89:e8:b2:a3:49:33:b6:6d:74:9c:3d:
65:21:7b:b0:40:3a:8f:5b:cc:d1:ea:af:77:08:fc:7a:7c:5d:
9f:1e:cf:5c:4f:1d:a7:19:de:b9:40:4f:09:d8:d3:65:d6:ea:
47:99:ea:25:73:1b:bd:bc:b1:53:29:41:0f:84:c4:b7:82:18:
8f:1a:5f:55:d1:fe:c1:89:25:7a:8b:96:26:e4:07:44:e2:99:
19:38:1c:63:03:c8:5f:fd:e9:e9:d4:86:9b:fe:4e:f1:3f:aa:
59:cc:87:ac:c7:d8:ee:ef:58:97:68:38:91:d0:75:b5:b2:04:
97:7a:b0:fd:ef:53:bf:f3:74:95:d8:0c:5b:63:ba:22:45:64:
41:d3:a9:b9:16:a3:92:be:67:42:d2:02:17:30:71:42:30:87:
1e:75:1f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:21 2023 by rpki-client on console-ams.rpki-client.org